Location : Fort Worth, Texas
Duration : 10 months
ID : cITs
Connections IT Services is in search of an IT Security Platform Engineer.
Description :
The Web Application Security team collaborates with application owners, architects, and developers in order to integrate security tools such as web application firewalls and bot mitigation to protect our client’s websites and mobile apps.
This team also collaborates with corporate security fraud teams, privacy teams, and incident response teams in investigations related to websites.
This individual is responsible for the analysis, design, implementation, and maintenance of the automation tasks for our product.
This individual is also responsible for collaborating with application owners and security vendors to update / tune Web Application Firewall (WAF) and bot mitigation security policies.
Qualifications
Minimum Qualifications - Education & Prior Job Experience
- Bachelor’s degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS / MIS), Engineering or related technical discipline, or equivalent experience / training
- 3 years of technology experience, with a focus on information security technology development and administration, web app development, or web application pen testing
Preferred Qualifications Education & Prior Job Experience
- Master’s degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS / MIS), Engineering or related technical discipline, or equivalent experience / training
- 5+ years of technology experience, with a focus on information security technology development and administration, web app development, or web application pen testing.
- CISSP, CISM, CISA, GIAC or other security certifications are desired
- Strong technical background with Akamai Web Application Firewall (WAF) and bot mitigation security policies
- Experience working with Akamai performance and security tools
Skills, Licenses & Certifications
- Solid comprehension of HTTP protocol and demonstrated ability to troubleshoot using HTTP logs and Splunk or other analytics tools
- Strong technical background in web development and familiarity with potential attack vectors / methods
- Strong technical background in scripting languages (Python, PowerShell, or JavaScript)
- Basic understanding of DNS, Networks, Firewalls, SSL Certificates
- Working understanding of Agile Framework
- Self-motivated learning, good attitude
Language & Communication Skills
- Ability to effectively communicate both verbally and written with all levels within the organization
- Ability to explain technical concepts and adjust messaging based on the audience, including non-technical groups
- Ability to influence through outstanding interpersonal skills, collaboration, and negotiation skills
- Ability to work well within a team environment, as well as independently
Application Security Engineer - Cryptography Background
Our client's Crypto Services Team is seeking an Application Support Engineer to join it’s new and growing Application Engineering Team. Experience in developing, deploying, and supporting applications written in Java Understand security concepts to build reliable and safe distributed applications. C...
IT Security (Zscaler) Engineer
IS&T is helping the Director of IT Security / CISO for a Power Generation/Infrastructure firm find an IT Security/Zscaler Engineer for a fulltime/direct hire position. Finally - we want to find a Security Engineer with well-developed people/EQ skills & awareness; and will take into consideration the...
Cybersecurity Application Security Vulnerability Engineer
Security technologies may include, but are not limited to: vulnerability scanners, Data Loss Prevention (DLP), Security Incident Event Management (SIEM), User Behavior Analytics, Host Intrusion Prevention (HIPS), Web Application Firewall (WAF), DevSecOps Pipelines, and Web/Email Gateway. A minimum o...
Application Security Engineer
Work with application development personnel and other technical team members to review existing and/or new APIs/web services in support of quality implementations that align with Security policies, procedures, and generally-accepted best practices. Performs application program interface security ass...
Senior Identity Access Management Security Engineer
The Identity & Access Management Senior Security Engineer is responsible for acting as resource, leader, and peer coach with other engineers in the development, testing, implementation, and integration of Identity and Access Management systems and solutions. Identity Access Management Platforms: Sys...
Security Application Engineer: Remote US - (Must be US citizen)
We are looking for a Security Application Engineer with a strong understanding of web and mobile application vulnerabilities, how they can be detected, exploited and remediated. Security Application Engineer, Application Security Team:. The area of responsibility of the application security team inc...
Application Security Engineer (OWASP)
Performs application program interface security assessments and remediation activities as part of the API security program. Application security responsibilities:. Work closely with DevOps and cloud infrastructure architects and engineers to design, implement and manage secure, scalable, and reliabl...
Application Security Engineer
Fort Worth, TX company is seeking a Application Security Engineer to join their team for a contract opportunity. Perform application program interface security assessments and remediation activities as part of the API security program. Comfortable with the following tools and technologies: Git, Soap...
Engineer, Secrets Management
Experience working with common application architectures (app/web servers, containerization, etc. Work closely with DevOps and cloud infrastructure architects and engineers to design, implement and manage secure, scalable, and reliable cloud infrastructure environments. Ability to support operations...
Security Application Engineer
We are looking for a Security Application Engineer with a strong understanding of web and mobile application vulnerabilities, how they can be detected, exploited and remediated. Note: Security scanners include, but are not limited to static application security testing (SAST), dynamic application se...